Search

The classification of network traffic has become increasingly crucial due to the rapid growth in the number of internet users. Conventional approaches, such as identifying traffic based on port numbers and payload inspection are becoming ineffective due to the dynamic and encrypted nature of modern network traffic. A number of researchers have implemented Software Defined Networking (SDN) based traffic classification using Machine Learning (ML) and Deep Learning (DL) models. However, the studies had various limitations such as encrypted traffic detection, payload inspection, poor detection accuracy, and challenges with testing models both in offline and real-time traffic modes. ML models together with SDN are adopted nowadays to enhance classification performance. In this paper, both supervised (Logistic Regression, Decision Tree, Random Forest, AdaBoost, and Support Vector Machine) and unsupervised (K-means clustering) ML models were used to classify Domain Name System (DNS), Telnet, Ping, and Voice traffic flows simulated using the Distributed Internet Traffic Generator (D-ITG) tool. The use of this tool effectively manages and classifies traffic types based on their application. The study discussed the dataset used, model selection, implementation of the model, and implementation techniques (such as pre-processing, feature extraction, ML algorithm, and model evaluation metrics). The proposed model in SDN was implemented in Mininet for designing the network architecture and generating network traffic. Anaconda Python environment was utilized for traffic classification using various ML techniques. Among the models tested, the Decision Tree supervised learning achieved the highest accuracy of 99.81%, outperforming other supervised and unsupervised learning algorithms. These results indicate that the integration of ML with SDN provides an efficient classification method for identifying and accurately classifying both offline and real-time network traffic, enhanced quality of service (QoS), detection of encrypted packets, deep packet inspection and management. [ABSTRACT FROM AUTHOR]

Federated Learning is an effective solution to address the issues of data isolation and privacy leakage in machine learning. However, ensuring the security of network devices and architectures deploying federated learning remains a challenge due to network attacks. This paper proposes an attention-based Graph Neural Network for detecting cross-level and cross-department network attacks. This method enables collaborative model training while protecting data privacy on distributed devices. By organizing network traffic information in chronological order and constructing a graph structure based on log density, enhances the accuracy of network attack detection. The introduction of an attention mechanism and the construction of a Federated Graph Attention Network (FedGAT) model are used to evaluate the interactivity between nodes in the graph, thereby improving the precision of internal network interactions. Experimental results demonstrate that our method achieves comparable accuracy and robustness to traditional detection methods while prioritizing privacy protection and data security. [ABSTRACT FROM AUTHOR]

Network flow watermark technology is a traffic marking technique that embeds watermark information into the characteristics of network flows to mark and trace attack flows generated by network attackers. However, with the development of network attack techniques, the time and number of packets required for network attacks have decreased. Existing network flow watermark technologies fail to balance watermark robustness and efficiency, resulting in poor practicality. To address this issue, this paper proposes an efficient hexadecimal network flow watermark method. The method introduces an efficient interval watermark algorithm and utilizes an interval synchronization algorithm to self-learn watermark parameters, thereby improving the encoding efficiency of the watermark. The design of watermark start and end markers ensures the practicality of network watermarks, enabling traceability and source attribution of attack flows in real network environments. The proposed method is experimentally tested using real network traffic, and the results demonstrate that even in the presence of a network jitter, the watermark detection success rate of this scheme remains above 95%. Compared to other network flow watermark schemes, the hexadecimal network flow watermark proposed in this paper achieves a 50% improvement in encoding and decoding efficiency while ensuring robustness. It also exhibits excellent resistance to network jitter, packet loss, and false packet insertion. [ABSTRACT FROM AUTHOR]

Traffic sign poles are crucial components of the highway system, and their maintenance mainly relies on the subjective judgment of staff, which is low-efficiency and will lead to mistaken inspections. This paper proposes a convenient and effective method to monitor the health of sign poles by using a mobile phone. It is unknown whether a mobile phone can be used as a conventional acceleration sensor. Therefore, the performance of the mobile phone was initially tested to ensure its suitability for acquiring the acceleration data of the traffic sign pole. The results show that the acceleration sensor of mobile phones is high-performance and can be used as a traditional acceleration sensor under the similar sampling frequency. The mobile phone can measure the 1st, 2nd and 5th natural frequencies of the traffic sign pole. Although the 1st and 5th natural frequencies have a large error with simulation, the 2nd natural frequency is accurate and stable. The looseness of the base connection greatly impacts on the 2nd natural frequency, which can be used as a measure of the loose base connection. The 2nd natural frequency was measured for 21 times and found to conform to a normal distribution. The relationship between the 2nd natural frequency and base connection loosening was investigated, which fitted to the equation. The fitting result is good and can be used to predict the degree of sign pole base connection loosening. Therefore, the mobile phone based convenient health monitoring method for traffic sign poles is feasible. [ABSTRACT FROM AUTHOR]

Sensors, wearables, mobile devices, and other Internet of Things (IoT) devices are becoming increasingly integrated into all aspects of our lives. They are capable of gathering enormous amounts of data, such as image data, which can then be sent to the cloud for processing. However, this results in an increase in network traffic and latency. To overcome these difficulties, edge computing has been proposed as a paradigm for computing that brings processing closer to the location where data is produced. This paper explores the merging of cloud and edge computing for IoT and investigates approaches using machine learning for dimensionality reduction of images on the edge, employing the autoencoder deep learning-based approach and principal component analysis (PCA). The encoded data is then sent to the cloud server, where it is used directly for any machine learning task without significantly impacting the accuracy of the data processed in the cloud. The proposed approach has been evaluated on an object detection task using a set of 4000 images randomly chosen from three datasets: COCO, human detection, and HDA datasets. Results show that a 77% reduction in data did not have a significant impact on the object detection task's accuracy. [ABSTRACT FROM AUTHOR]

Accurate traffic flow prediction information can help traffic managers and drivers make more rational decisions and choices. To make an effective and accurate traffic flow prediction, we need to consider not only the spatio-temporal dependencies between data, but also the temporal correlation between data. However, most existing methods only consider temporal continuity and ignore temporal correlation. In this paper, we propose a multi-modal attention neural network for traffic flow prediction by capturing long-short term sequence correlation (LSTSC). In the model, we employed attention mechanisms to capture the spatio-temporal correlations of the sequences, and the model based on multiple decision forms demonstrated higher accuracy and reliability. The superiority of the model is demonstrated on two datasets, PeMS08 and PeMSD7(M), particularly for long-term predictions. [ABSTRACT FROM AUTHOR]

Routing and security are the two main prerequisites for ensuring the correct operation of wireless networks. The importance of these cases doubles in wide networks such as IoT. This paper presents an algorithm to improve Secure Routing in IoT called SRAIOT. This algorithm uses a hierarchical structure to determine the connections between network components and data transfer routing. In SRAIOT, the network structure is managed hierarchically and through SDN. For this purpose, the IoT network is first divided into a set of subnets using the SDN solution, communication control and authentication are managed using the controller nodes of each subnet. The communication between two objects (located in different subnets) will be possible if their identity is confirmed through the controller nodes related to them. On the other hand, in order to identify the sources of attacks and network security threats, the controller nodes in each subnet monitor the network traffic pattern using an ensemble learning model and identify possible attacks in their subnet. The performance of SRAIOT was tested in the simulation, and the results were compared with previous methods. The results of these tests show that SRAIOT improves network performance regarding routing and detecting attacks. [ABSTRACT FROM AUTHOR]

Air transport has been identified as one of the primary means whereby COVID-19 spread throughout Europe during the early stages of the pandemic. In this paper we analyse two categories of methods – dynamic network markers (DNMs) and network analysis-based methods – as potential early warning signals for detecting and anticipating COVID-19 outbreaks in Europe on the basis of accuracy regarding the daily confirmed cases. The analysis was carried out from 15 February 2020, around two weeks before the first COVID-19 cases appeared in Europe, and 1 May 2020, approximately two weeks after all the air traffic in Europe had been shut down. Daily European COVID-19 information sourced from the World Health Organization was used, whereas air traffic data from Flightradar24 has been incorporated into the analyses by means of four alternative adjacency matrices. Some DNMs have been discarded since they output multiple time series, which makes it very difficult to interpret their results. The only DNM outputting a single time series does not emulate the COVID-19 trend: it does not detect all the main peaks, which means that peak heights do not match up with the increase in the number of infected people. However, many combinations of network analysis based methods and adjacency matrices output good results (with high accuracy and 20-day advance forecasts), with only minor differences from one to another. The number of edges and the network density methods are slightly better when dynamic flight frequency information is used. [ABSTRACT FROM AUTHOR]

Reliable traffic flow data is not only crucial for traffic management and planning, but also the foundation for many intelligent applications. However, the phenomenon of missing traffic flow data often occurs, so we propose an imputation model for missing traffic flow data to overcome the randomness and instability bands of traffic flow. First, k-means clustering is used to classify road segments with traffic flow belonging to the same pattern into a group to utilize the spatial characteristics of roads fully. Then, the LSTM networks optimized with an attention mechanism are used as the base learner to extract the temporal dependence of the traffic flow. Finally, the AdaBoost algorithm is used to integrate all the LSTM-attention networks into a reinforced learner to impute the missing data. To validate the effectiveness of the proposed model, we use the PeMS dataset for validation, we impute the data with missing data rate from 10 to 60% under three missing modes, and we use multiple baseline models for comparison, which confirms that our proposed model improves the stability and accuracy of imputing the missing data of the traffic flow with different scenarios. [ABSTRACT FROM AUTHOR]

Today wireless systems include the fifth and sixth generations (5G and 6G) technologies and are growing day by day that result in exponentially increasing data traffic. For providing a reliable and high performance radio frequency (RF) designs especially for 6G networks, amplifiers and antenna as active and passive components play important roles. In the 5G/6G communication systems, the propagation loss is considerably large and its compensation requires high output power generated from the amplifiers for guaranteeing the satisfied quality of transmitted signal. From another point of view, the installed antennas must be able to optimally manage the radiated signals and handle/compensate nonlinear performances of the RF circuitry. Hence, advanced modeling and multi-objective optimization algorithms are required for designing and optimizing high performance amplifiers and antennas in terms of output power, gain, efficiency, linearity, and bandwidth. Concurrently optimizing active and passive components is not straightforward and typically it requires additional efforts by the RF designers. To tackle this drawback, a two-step methodology is proposed: (1) configuring the initial structure of active and passive devices, and (2) sizing the configured devices. In this work, various methods are introduced for structuring the topology of circuits and then artificial intelligence, including machine learning and neural networks, is preferred among other surrogate modelling for sizing the designs. These neural networks are satisfied due to the accurate modeling responses and are able to provide an automated optimization process leads to employ multi-objective optimization methods. In this work, an automated optimization process for comprehensive design of high-performance amplifiers with antennas through bottom-up optimization (BUO) method and long short-term memory (LSTM)-based deep neural networks (DNNs) is proposed. At the output layer of DNNs, the multi-objective multi-verse optimizer (MOMVO) method is employed for optimizing various specifications of active device (i.e., amplifier), and passive device (i.e., antenna), concurrently. In the presented method, all the electromagnetic (EM) design rules are implemented which results in reducing simulation time in the harmonic balance simulation environment that also provides ready to fabricate layouts. The novelty consists of the all-inclusive style that (1) reduces the manual breaks, aka time-to-market, and (2) delivers ready-to-fabricate layouts of the device that exhibits global optimum performances, automatically. The validation of the proposed method is verified by designing and optimizing high power amplifier (HPA) with antenna in the frequency band from 9.0 GHz to 9.6 GHz, suitable for upper-mid band 6G communications. [ABSTRACT FROM AUTHOR]

The constantly changing nature of cyber threats presents unprecedented difficulties for people, institutions, and governments across the globe. Cyber threats are a major concern in today's digital world like hacking, phishing, malware, and data breaches. These can compromise anyone's personal information and harm the organizations. An intrusion detection system plays a vital responsibility to identifying abnormal network traffic and alerts the system in real time if any malicious activity is detected. In our present research work Artificial Neural Networks (ANN) layers are optimized with the execution of Spider Monkey Optimization (SMO) to detect attacks or intrusions in the system. The developed model SMO-ANN is examined using publicly available dataset Luflow, CIC-IDS 2017, UNR-IDD and NSL -KDD to classify the network traffic as benign or attack type. In the binary Luflow dataset and the multiclass NSL-KDD dataset, the proposed model SMO-ANN has the maximum accuracy, at 100% and 99%, respectively. [ABSTRACT FROM AUTHOR]

Internet of Things (IoT) paves the way for the modern smart industrial applications and cities. Trusted Authority acts as a sole control in monitoring and maintaining the communications between the IoT devices and the infrastructure. The communication between the IoT devices happens from one trusted entity of an area to the other by way of generating security certificates. Establishing trust by way of generating security certificates for the IoT devices in a smart city application can be of high cost and expensive. In order to facilitate this, a secure group authentication scheme that creates trust amongst a group of IoT devices owned by several entities has been proposed. The majority of proposed authentication techniques are made for individual device authentication and are also utilized for group authentication; nevertheless, a unique solution for group authentication is the Dickson polynomial based secure group authentication scheme. The secret keys used in our proposed authentication technique are generated using the Dickson polynomial, which enables the group to authenticate without generating an excessive amount of network traffic overhead. IoT devices' group authentication has made use of the Dickson polynomial. Blockchain technology is employed to enable secure, efficient, and fast data transfer among the unique IoT devices of each group deployed at different places. Also, the proposed secure group authentication scheme developed based on Dickson polynomials is resistant to replay, man-in-the-middle, tampering, side channel and signature forgeries, impersonation, and ephemeral key secret leakage attacks. In order to accomplish this, we have implemented a hardware-based physically unclonable function. Implementation has been carried using python language and deployed and tested on Blockchain using Ethereum Goerli's Testnet framework. Performance analysis has been carried out by choosing various benchmarks and found that the proposed framework outperforms its counterparts through various metrics. Different parameters are also utilized to assess the performance of the proposed blockchain framework and shows that it has better performance in terms of computation, communication, storage and latency. [ABSTRACT FROM AUTHOR]

Wireless traffic prediction is vital for intelligent cellular network operations, such as load-aware resource management and predictive control. Traditional centralized training addresses this but poses issues like excessive data transmission, disregarding delays, and user privacy. Traditional federated learning methods can meet the requirement of jointly training models while protecting the privacy of all parties' data. However, challenges arise when the local data features among participating parties exhibit inconsistency, making the training process difficult to sustain. Our study introduces an innovative framework for wireless traffic prediction based on split learning (SL) and vertical federated learning. Multiple edge clients collaboratively train high-quality prediction models by utilizing diverse traffic data while maintaining the confidentiality of raw data locally. Each participant individually trains dimension-specific prediction models with their respective data, and the outcomes are aggregated through collaboration. A partially global model is formed and shared among clients to address statistical heterogeneity in distributed machine learning. Extensive experiments on real-world datasets demonstrate our method's superiority over current approaches, showcasing its potential for network traffic prediction and accurate forecasting. [ABSTRACT FROM AUTHOR]

Network security has developed as a critical research subject as a result of the Rapid advancements in the development of Internet and communication technologies over the previous decades. The expansion of networks and data has caused cyber-attacks on the systems, making it difficult for network security to detect breaches effectively. Current Intrusion Detection Systems (IDS) have several flaws, including their inability to prevent attacks on their own, the requirement for a professional engineer to administer them, and the occurrence of false alerts. As a result, a plethora of new attacks are being created, making it harder for network security to properly detect breaches. Despite the best efforts, IDS continues to struggle with increasing detection accuracy while lowering false alarm rates and detecting new intrusions. Therefore, network intrusion detection enhancement by preprocessing and generation of highly reliable algorithms is the main focus nowadays. Machine learning (ML) based IDS systems have recently been implemented as viable solutions for quickly detecting intrusions across the network. In this study, we use a combined data analysis technique with four Robust Machine learning ensemble algorithms, including the Voting Classifier, Bagging Classifier, Gradient Boosting Classifier, and Random Forest-based Bagging algorithm along with the proposed Robust genetic ensemble classifier. For each algorithm, a model is created and tested using a Network Dataset. To assess the performance of both algorithms in terms of their ability to anticipate the anomaly occurrence, graphs of performance rates have been evaluated. The suggested algorithm outperformed other methods as it shows the lowest values of mean square error (MSE) and mean absolute error (MAE). The experiments were conducted on the Network traffic dataset available on Kaggle, on the Python platform, which has limited samples. The proposed method can be applied in the future with more machine learning ensemble classifiers and deep learning techniques. [ABSTRACT FROM AUTHOR]

Cyber-attacks are a major problem for users, businesses, and institutions. Classical anomaly detection techniques can detect malicious traffic generated in a cyber-attack by analyzing individual network packets. However, routers that manage large traffic loads can only examine some packets. These devices often use lightweight flow-based protocols to collect network statistics. Analyzing flow data also allows for detecting malicious network traffic. But even gathering flow data has a high computational cost, so routers usually apply a sampling rate to generate flows. This sampling reduces the computational load on routers, but much information is lost. This work aims to demonstrate that malicious traffic can be detected even on flow data collected with a sampling rate of 1 out of 1,000 packets. To do so, we evaluate anomaly-detection-based models using synthetic sampled flow data and actual sampled flow data from RedCAYLE, the Castilla y León regional subnet of the Spanish academic and research network. The results presented show that detection of malicious traffic on sampled flow data is possible using novelty-detection-based models with a high accuracy score and a low false alarm rate. [ABSTRACT FROM AUTHOR]